Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa
File: cd939959-f7a9-375a-86a0-c699a51f7975.roa (raw, json)
Hash identifier: EZQdSbw8jKEFjBOW0dxakn8CSL+48MxHr897L8aZ05g=
Subject key identifier: 69:A3:7A:D6:02:D8:39:D3:D2:96:9B:16:02:13:8B:B5:6E:2A:2A:22
Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial: 010D0C9F43285849513026ADF9FF266728948F80
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa
Signing time: Wed 26 Mar 2025 14:51:19 +0000
ROA not before: Wed 26 Mar 2025 14:51:19 +0000
ROA not after: Tue 24 Jun 2025 14:51:19 +0000
asID: 21947
IP address blocks: 199.195.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:51:30:26:ad:f9:ff:26:67:28:94:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Validity
Not Before: Mar 26 14:51:19 2025 GMT
Not After : Jun 24 14:51:19 2025 GMT
Subject: CN=f8155a16-2080-418f-9f8e-2d2959511b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e4:f9:52:e5:ed:d3:12:c9:dc:60:bf:41:f1:
6c:f5:f7:c8:c5:d3:b5:1d:a8:6b:e7:57:7e:0b:6b:
3c:16:7f:c5:15:d6:4e:4b:6e:8f:b9:98:ac:f6:5c:
f2:f1:04:49:e1:c1:cc:43:34:ef:3d:1a:bf:6a:10:
5b:0d:27:3e:6e:80:80:1e:d0:1e:38:39:b4:91:95:
5e:74:98:c9:70:80:f5:f1:2d:df:91:19:07:88:db:
c7:05:9e:73:b5:34:8b:60:f7:c0:3a:c2:7f:6b:8c:
4f:3f:9f:2d:24:59:36:14:8e:e2:d8:ee:b6:37:ce:
40:35:0a:21:8e:57:b3:ff:ad:6b:c3:c5:23:07:fa:
45:e8:10:e0:b6:7c:c6:31:ee:ac:f9:d4:ef:8d:73:
6f:a0:e0:ca:1d:5e:29:95:e1:a8:d9:66:cc:cc:f6:
3d:11:e0:8d:b5:32:c2:af:77:a9:82:47:61:02:a7:
e5:a8:b9:f7:2a:6a:94:a6:4f:4a:dc:d9:c3:3d:1b:
45:b1:d7:4a:be:88:08:94:d4:d8:c3:4a:d0:54:d5:
97:1d:4e:1a:42:fe:e2:53:23:f7:80:e2:99:ed:28:
32:16:d3:43:31:64:77:25:8c:9f:a1:b6:84:bb:2d:
fa:fb:75:13:06:56:c9:22:6f:0e:9a:5b:1a:da:56:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A3:7A:D6:02:D8:39:D3:D2:96:9B:16:02:13:8B:B5:6E:2A:2A:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
X509v3 Authority Key Identifier:
keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
sbgp-ipAddrBlock: critical
IPv4:
199.195.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:ff:98:1e:1a:55:b8:10:71:64:99:c2:f6:57:6e:c3:0f:a9:
91:f8:0e:93:54:e1:2f:21:1e:48:4d:e5:a9:74:41:8c:91:74:
af:0e:59:1d:66:ed:4d:3f:bb:eb:a1:10:e2:47:17:d1:b8:f4:
ad:fb:1e:40:aa:84:2c:3e:54:e6:d0:16:c3:bc:66:3a:f9:1b:
e8:00:e6:41:1b:93:52:2d:2c:90:9b:b7:e4:3f:bf:ee:0e:c0:
76:da:49:67:06:15:5e:e1:43:aa:b9:58:0c:9b:27:d8:dc:5e:
d4:a9:fc:d5:34:5d:b5:d6:65:ce:89:c7:5c:fb:77:4e:ee:1d:
24:42:23:03:34:5d:5c:a1:8c:20:17:a6:d0:15:04:66:1d:ca:
5b:eb:90:64:22:9b:6a:14:b7:8c:10:1b:f4:4b:50:b7:21:9b:
e8:92:0f:5b:8f:a0:66:5c:a2:6d:94:11:56:0d:8e:15:8e:0c:
0d:02:75:30:1b:95:48:84:d3:66:58:2f:ba:49:ef:87:d8:44:
7c:9c:c7:4c:47:54:d0:6a:54:0d:90:00:93:81:3e:86:3f:5c:
47:b5:88:69:17:bd:6c:1c:ce:b7:a3:e9:30:e1:7f:c7:07:f8:
5a:e6:c9:f3:ef:14:e8:69:03:7f:b4:d7:78:64:3e:59:0f:1a:
d6:ff:f1:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElRMCat+f8mZyiUj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz
OGEzMB4XDTI1MDMyNjE0NTExOVoXDTI1MDYyNDE0NTExOVowLzEtMCsGA1UEAxMk
ZjgxNTVhMTYtMjA4MC00MThmLTlmOGUtMmQyOTU5NTExYjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+T5UuXt0xLJ3GC/QfFs9ffIxdO1Hahr51d+
C2s8Fn/FFdZOS26PuZis9lzy8QRJ4cHMQzTvPRq/ahBbDSc+boCAHtAeODm0kZVe
dJjJcID18S3fkRkHiNvHBZ5ztTSLYPfAOsJ/a4xPP58tJFk2FI7i2O62N85ANQoh
jlez/61rw8UjB/pF6BDgtnzGMe6s+dTvjXNvoODKHV4pleGo2WbMzPY9EeCNtTLC
r3epgkdhAqflqLn3KmqUpk9K3NnDPRtFsddKvogIlNTYw0rQVNWXHU4aQv7iUyP3
gOKZ7SgyFtNDMWR3JYyfobaEuy36+3UTBlbJIm8Omlsa2lb8iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGmjetYC2DnT0pabFgITi7VuKioiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3
MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvY2Q5Mzk5NTktZjdhOS0z
NzVhLTg2YTAtYzY5OWE1MWY3OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk
YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj
MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1
NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8N4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABP/mB4aVbgQcWSZwvZXbsMPqZH4DpNU4S8hHkhN5al0QYyRdK8OWR1m
7U0/u+uhEOJHF9G49K37HkCqhCw+VObQFsO8Zjr5G+gA5kEbk1ItLJCbt+Q/v+4O
wHbaSWcGFV7hQ6q5WAybJ9jcXtSp/NU0XbXWZc6Jx1z7d07uHSRCIwM0XVyhjCAX
ptAVBGYdylvrkGQim2oUt4wQG/RLULchm+iSD1uPoGZcom2UEVYNjhWODA0CdTAb
lUiE02ZYL7pJ74fYRHycx0xHVNBqVA2QAJOBPoY/XEe1iGkXvWwczrej6TDhf8cH
+FrmyfPvFOhpA3+013hkPlkPGtb/8Qk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:44 2025 by rpki-client